Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
File:                     20570a30-2951-3964-8c53-b4274dd2eabe.roa (raw, json)
Hash identifier:          9EGOAscBl3+dny1Gb6aLid1cGXYJVXLETsSVQ4ic0J0=
Subject key identifier:   13:FF:91:9B:31:DC:5F:3E:62:82:70:DD:A0:DC:7A:7D:D0:76:59:F9
Certificate issuer:       /CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3
Certificate serial:       010D0C9F4328584F58CD564BC195342C89A34E40
Authority key identifier: 32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     401155
IP address blocks:        2602:819:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:56:4b:c1:95:34:2c:89:a3:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=5477a945-77e3-4c8c-b51b-e6e93396ef40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:db:63:76:b5:26:fe:c7:89:12:a9:71:a5:
                    b1:94:24:c6:fc:bf:ed:be:50:9a:89:cb:60:57:93:
                    7d:1f:8d:30:ae:a1:77:30:40:50:c7:85:8e:d7:f8:
                    f4:6c:e0:39:45:cf:bd:99:f3:11:dc:c0:f3:ba:d6:
                    c8:98:f6:37:96:85:af:44:d6:9e:09:a0:ab:77:72:
                    92:f3:04:0c:90:ec:73:83:38:c3:f3:f7:80:85:04:
                    29:f9:11:70:d6:2b:a1:a4:a3:21:2b:d5:a9:bf:25:
                    e8:17:9e:da:1d:9c:6a:d2:46:e2:c0:e2:b8:a1:c7:
                    11:e5:d9:23:88:37:d1:24:2c:36:59:b8:d7:b9:ff:
                    87:04:d2:e9:ae:a4:77:20:f3:9d:3e:89:82:8d:50:
                    ab:6b:16:c3:2a:32:0d:64:a3:60:77:45:ef:44:17:
                    03:9a:0b:59:18:1f:33:59:7f:27:e1:53:d3:6c:87:
                    4f:06:a3:7c:8a:82:6c:a5:6e:05:21:28:f6:6e:ce:
                    03:5e:71:89:18:5e:20:44:6b:b0:4d:2b:d3:6b:45:
                    48:99:76:74:6b:9e:80:0c:86:51:0c:53:6b:f6:25:
                    82:2e:8e:da:7a:b0:9b:1a:66:39:0d:d4:a0:88:b4:
                    0f:97:64:c9:29:93:fc:d0:03:be:03:2f:ce:9b:31:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FF:91:9B:31:DC:5F:3E:62:82:70:DD:A0:DC:7A:7D:D0:76:59:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/20570a30-2951-3964-8c53-b4274dd2eabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl

            X509v3 Authority Key Identifier:
                keyid:32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c3:10:52:a9:ee:84:dc:fb:8b:9a:e2:ee:c9:ad:64:ba:10:
         7f:89:53:1e:e9:b6:93:2a:f2:8f:8e:59:cc:97:20:0b:24:3a:
         66:07:4a:88:15:e5:57:c1:85:e6:f3:b7:26:91:ad:97:27:62:
         68:ff:e7:1f:e2:b4:1f:07:26:4c:09:09:5a:c0:d0:fc:ff:f9:
         5b:b2:69:d1:fa:69:fd:48:56:bf:42:1b:a9:b5:46:58:b1:29:
         7b:be:71:8a:4d:70:0c:7f:09:bc:96:47:d8:b8:ae:58:8a:70:
         eb:5d:13:3f:aa:2e:03:9d:b8:bf:22:fa:0d:90:db:1c:48:70:
         fb:23:45:45:1a:02:88:78:8c:a5:d1:2b:c1:22:be:08:83:4c:
         c6:c7:7e:35:32:ae:92:1c:8e:46:9f:e0:e3:f8:74:05:c4:27:
         dd:68:16:1d:90:53:9d:0a:4c:5e:64:e1:ad:87:18:67:5c:be:
         26:f5:c5:49:8a:0a:06:22:a8:d6:bd:bc:09:c2:1b:5a:af:fc:
         79:4c:e4:f1:c7:06:aa:b2:54:b7:54:77:e7:72:e0:14:59:48:
         6f:65:61:f3:9f:b8:96:43:20:11:8c:d3:d0:d6:15:fd:bc:5b:
         66:02:1d:b9:54:37:c2:6b:38:0a:74:7f:3d:4c:c5:e2:41:b0:
         94:26:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:11:20 2026 by rpki-client